xmrig | 0b1e324816c31e8659b06b2a5aff9b1761e91a54a3ae1d9c4baeb094cb74823c

General

Target

0b1e324816c31e8659b06b2a5aff9b1761e91a54a3ae1d9c4baeb094cb74823c
Size

2.9MB
MD5

2655ef91d582cccfd7009f579e18d06d
SHA1

c89eb6fe97d033001940968d5045e8691886f3bc
SHA256

0b1e324816c31e8659b06b2a5aff9b1761e91a54a3ae1d9c4baeb094cb74823c
SHA512

4acc004ae0265187ab4f86e259a2e85c141569ec285ac05c3eb9237728cdcfc4fd62498762bd63cdd5ce3d260818321d899647290b5e453ba6891fa2f5b53e77
SSDEEP

49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkyW10/wKV7hjSeX:71ONtyBeSFkXV1etEKLlWUTOfeiRA2Rj

Score

10^/10

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b1e324816c31e8659b06b2a5aff9b1761e91a54a3ae1d9c4baeb094cb74823c